Lucene search
PRIOn knowledge basePRION:CVE-2021-44029HistoryDec 22, 2021 - 6:15 a.m.
Deserialization of untrusted data
2021-12-2206:15:00
PRIOn knowledge base
www.prio-n.com
13
An issue was discovered in Quest KACE Desktop Authority before 11.2. This vulnerability allows attackers to execute remote code through a deserialization exploitation in the RadAsyncUpload function of ASP.NET AJAX. An attacker can leverage this vulnerability when the encryption keys are known (due to the presence of CVE-2017-11317, CVE-2017-11357, or other means). A default setting for the type whitelisting feature in more current versions of ASP.NET AJAX prevents exploitation.
| CPE | Name | Operator | Version |
|---|---|---|---|
| kace_desktop_authority | ge | 10.0 | |
| kace_desktop_authority | lt | 11.2 |
Related
cvelist
cvelist
attackerkb
attackerkb
cve
cve
nvd
nvd
exploitpack
exploitpack
Telerik UI for ASP.NET AJAX 2012.3.1308 2017.1.118 - Arbitrary File Upload
2018-01-24 00:00:00
checkpoint_advisories
checkpoint_advisories
Telerik UI Arbitrary File Upload (CVE-2017-11317; CVE-2017-11357)
2020-07-13 00:00:00
nessus
nessus
Telerik UI for ASP.NET AJAX RadAsyncUpload Multiple Vulnerabilities
2020-07-01 00:00:00
Telerik UI for ASP.NET AJAX RadAsyncUpload Multiple Vulnerabilities
2018-03-02 00:00:00
prion
prion
Deserialization of untrusted data
2019-12-11 13:15:00
Code injection
2017-08-23 17:29:00
Code injection
2017-08-23 17:29:00
thn
thn
exploitdb
exploitdb
githubexploit
githubexploit
Exploit for Inadequate Encryption Strength in Telerik Ui For Asp.Net Ajax
2018-01-09 13:53:57
Exploit for Deserialization of Untrusted Data in Telerik Ui For Asp.Net Ajax
2020-05-29 07:29:52
ics
ics
Threat Actors Exploit Progress Telerik Vulnerabilities in Multiple U.S. Government IIS Servers
2023-06-15 12:00:00
Hitachi ABB Power Grids eSOMS Telerik
2021-03-18 12:00:00
cnvd
cnvd
Quest KACE Desktop Authority Deserialized Code Execution Vulnerability
2021-12-27 00:00:00
veracode
veracode
Unrestricted File Upload
2020-06-25 08:38:28
Insecure Direct Object Reference
2020-06-25 08:57:24
cisa_kev
cisa_kev
Telerik UI for ASP.NET AJAX Insecure Direct Object Reference Vulnerability
2023-01-26 00:00:00
Telerik UI for ASP.NET AJAX Unrestricted File Upload Vulnerability
2022-04-11 00:00:00
metasploit
metasploit
Telerik UI ASP.NET AJAX RadAsyncUpload Deserialization
2020-10-07 17:40:10
hackerone
hackerone
packetstorm
packetstorm
Telerik UI ASP.NET AJAX RadAsyncUpload Deserialization
2020-10-20 00:00:00
zdt
zdt
Telerik UI ASP.NET AJAX RadAsyncUpload Deserialization Exploit
2020-10-21 00:00:00
impervablog
impervablog
Australian Cyber Attack Vectors Blocked Out of the Box by Imperva WAF
2020-07-06 15:01:00